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ABSTRACT 


This thesis places the Information Resource Management 
PoaentEcctunbemwormtune U.S. Coast Guard in the ‘contagious 
growth' stage of Nolan's model of organizational computer 
growth. Control is the next stage predicted by the model. 
Tiewrtinaneciat accounting basis of EDP chargeback and control 
systems iS examined aS a precursor to developing five 
management control requirements of the IRM architecture. 
These include (1) aggregate financial accounting for infor- 
Mation services, (2) an auditable user access/authorization 
scheme, (3) a user-oriented chargeback system, (4) pricing 
to establish an information marketplace, and (5) an informa- 
tion decision tool to assist in user tradeoff decisions 
between information services. Finally, an integrated system 
to satisfy these requirements at the Coast Guard District 
Office level of the IRM architecture is described, based on 


a Local Area Network system. 
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iene eos | GUARD IRM ARCHITECTURE 


A. INFORMATION SYSTEM PROJECTS 

In the early 1970's, the U.S. Coast Guard began automa- 
ting and integrating the administrative and communications 
systems which constitute its servicewide Information System. 
A ™mumber of major Information System Projects were 
identified, each specifying a single functional system, 
usually vertically integrated from the data-entry field unit 
through to the Program Manager level at Coast Guard 
Headquarters. Examples include the Operational Information 
System project (OPINS), the Personnel Management Information 
System (PMIS), the Marine Safety Information System (MSIS), 
and the Standardized Aids to Navigation System (SANDS). 
Other projects became necessary to support these Information 
systems; the Standard Terminal Project competitively bid a 
requirements contract for procurement of up to 3900 
intelligent communications and data entry terminals, and the 
semi-Automated Message Processing Project (SAMPS) began 
computerizing manpower intensive relay points in the record 


Sormunileaelons network. 


Pode OF PiCE OF T 
The Paperwork Reduction Act of 1980 mandated a central 


point of information management in each agency. In 1981, 





aon som eyentorethe various Information Projects, and 
for Information Resource Management Coast Guard-wide was 
Vee Geli sanewly stormed O©frice of Command, Control and 
Communications (C3), synthesized from the former Financial 
Information Systems, Electronic/Electrical Engineering, and 
Telecommunications Management Divisions at Coast Guard 
Headquarters. Its staff symbol, (Commandant)G-T, became 
widespread verbal shorthand and the “Office of T" was born. 
meetne Urs. COAST GUARD INFORMATION RESOURCE MANAGEMENT 

ARCHITECTURE 

An overall schema was needed, to guide the integration 
and coordination of the various separate information systems 
and the supporting projects into a servicewide Coast Guard 
Information System. The Office of T developed and published 
the Coast Guard Information Resource Management Architecture 
Mimmesiarated if Figure 1. The two primary policy documents 
Supporting and implementing this architecture are the 
(DRAFT) Command, Control and Communications (C3) Plan [Ref. 
1], and the Command, Control and Communications (Cc?) 5 Uleyelene 1g 
Pie@epeam Plan, 1982-1992, (Ref. 2]. 

ie overvilew avememmarcal Success Factors 

The best overview and explanation of the Information 

Resource Management (IRM) Architecture is in the c3 Plan 


itself: 





U.S. Coast Guard Information 
Resources Management Architecture 
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Figure 1. U.S. Coast Guard Information Resources 
Management Architecture 





Yimgormation Architecture Plan. 

The first step in effective Information Resource 
Management is to develop the Information Architecture 
Plan. This is similar to a business plan inacommercial 
firm. The information needs and activities of the various 
parts of the organization (emphasis added) are collected 
and analyzed to determine the manner in which data must be 
organized to support them. This leads to development of a 
logical model which describes the arrangement and activi- 
ties of the organization. This logical model has been 
found to be quite stable unless the fundamental character 
of the organization is altered or its missions change 
radically ina short time. Because the logical model is 
stable, evolutionary changes can be accommodated.." [Ref. 
me. o2). 


The added emphasis underscores the fact that unless 
a part of the organization articulates an information need 
Omepactivity, the Plan cannot address it. Needs of the 
system overall, "global" needs (like a need for management 
control) will not enter the Architecture without a sponsor, 
Since they are not the assigned task of any specific 
organizational element. 

The Coast Guard has identified four Critical Success 
Factors for developing the Information Resources Management 
Architecture: 

1. Intelligent Terminals--to provide a vehicle for local 
processing, source data entry, and access to the net- 
work(s), 

2. Data Base Technology--to control the data resource, 


3. The Communications Network--to provide connectivity, 
and 


4. Integration--of the parts into a whole. 
URCEE = 38. \Cauewiey saci 
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The emphasis on database technology was not intended to 

melo veenerwereation Of Many parallel vertical information 

systems: 
"The IRM architecture and other policies of the (Office of 
T) program discourages the proliferation of field-unit 
terminals connected independently to single-program 
central data bases. This would be an electronic version of 
Our present uncoordinated, overlapping, manual information 
esteem.  {Reft. 1: pp. 4-7] 

The databases shown, at Headquarters, in the District 

Offices, and at major shore facilities, are to be shared, 

multi-purpose databases. 

The number of mini-computers shown, coupled with the 
melemtification of intelligent terminals as a Critical 
Success Factor, mean that this is a ‘distributed’ system. 
Computing power is placed as close as possible to the people 
who need to use it. This contrasts with a centralized system 
where all computing is done at one usually large central 
computer and user terminals are capable only of data entry 
and routine inquiries. 

2. Classes of Information Serviced 

The Ce Support Plan addresses the three classes of 
Information which the IRM Architecture will have to service: 
Maaiaachlonal, hierarchical, and local. Figure 2 illus- 
trates the flow of hierarchical information: 

So eomorguremschows hierarchical information flowing from 
Ehe smallest unit, to the top of the Coast Guard, and 
ultimately beyond to both Congressional and Executive 
recipients. While all three types of information have 


G@t@ay areas of overlap, the essential features of 
hierarchical are aggregation, and use by management over 
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time periods of weeks to years. These two features mean 
tie eo weanelminessa Of the information is not critical, 
and the precision and detail of the aggregated information 


decreases as the hierarchical level increases. Hierarchi- 
cal information supports the management control and 
Beeaeegic COMe-olerUnctions Of the organization. [Ref. 2: 
p. 4-2] 


Hierarchical Inforrmation 


Higher Gov’t 





Tims: Not Critical 


Deta: Complex Structure 
Aggregated & Summarized 


Use: Managemert Allocation, Manning, Control 
Traditionally: Paper Systems 


Figure 2. Flow of Hierarchical Information 


Peaimoacttona! Mn re@rmat MenwawWew is shown in Figure 3 and 
defined as follows: 


J(Momulunec mMhuctrakes transactional information, 
based upon data groupings which flow intact from point-to- 
point in the organization and usually cause or support 
rapid activity. In contrast to hierarchical information 
the precision of transactional information is constant and 





Eeatisacrlomer are Not usually aggregated. This information 
type is often found in our present record communications 
and feeds the operational control function( operating the 
organization day-in and day-out). A “message MILSTRIP" is 
a perfect example. Transaction information often has a 
eo ler nous teomi1erarenhical and this input (and often 
mes duphicaction) 15 a Sa@qgnificant problem/cost to the 
Coast Guard." [Ref. 2: p. 4-2] 
(The message MILSTRIP mentioned is a telexed supply 
requisition.) Local information is defined as any and all 
information that an individual or organizational element 
chooses to use and keep when it is not institutionally 


required to do so. 


Transaction Information 
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Figure 3. Flow of Transactional Information 
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Bee aemrole OF Ehe District Office 

Central to all three of the figures depicting 
information flow in the Coast Guard has been the Coast Guard 
District Office. Situated between the strategic level of 
Coast Guard Headquarters and the operational level of the 
field units, the District Headquarters operates at the level 
of management control. Every major Headquarters Office 
and/or Program Manager connects to a corresponding District 
Division or Branch. Districts are responsible for managing 
Coast Guard resources within a given geographic area (l.e. 
[mene District = Maryland, Virginia, N. Carolina). The 
District Commander (a two-star Admiral) as the principal 
agent and representative of the Commandant, is responsible 
for the administration and general direction of district 
units under his command. Within his District, he is 
responsible for carrying out the functions and duties of the 
Coast Guard and for assuring that these duties are performed 
efficiently, safely and economically. Districts produce the 
feombey OF EransSactional information. [Ref. 2: pp. 1-10] 
Table I shows the names and locations of the twelve District 
Offices. 

The District Commander's responsibility for local 
control of Coast Guard resources extends to information 
resources, too. In 1981, three officer billets (One Comman- 
der(Q-5), one Lieutenant(O-3) and one Warrant Officer(CWO- 


4)) were added to the staffs of each of the twelve District 
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Sette osw toe tormmestne nucleus of an IRM staff. Combined with 
eiesexisting telecommunications organization, they are meant 
memmetvolve Aanto Lhe providers/supervisors of all the 
imeermatton services shown in the "CG District" box within 
egies |) Phas) District IRM staff will operate the Local 
feeoeNetwork and the District Mini-Computer, maintain the 
PObsiGrict database and provide the Information Center 


services specified in the IRM Architecture. 


itaole tt. Weoe@eccienGiacc astrice Office Locations 


Pesce rict District Headquarters 
Location 
mest District Boston, MA 
Second District St Louis, MO 
iia District New York, NY 
Meee District Portsmouth, VA 
Seventh District Miami, FL 
Poapanch District New Orleans, LA 
feeoeth District Cleveland, OH 
Eleventh District Long Beach, CA 
imjetrth District Sam eprancisco, CA 
iieeceenth District Seattle, WA 
Fourteenth District emo iiaeltas il 
Seventeenth District Juneau, AK 


Peete, DISTRICT LOCAL NETWORK 
While the IRM Architecture and its Support plans provide 
for and define a local network capability for each District, 
D@CecmONOG tema  CeheittcCal nos a high-priority project. The ce 
Plan defines the Local Network as follows: 
St Viwieememamustretat office building and immediate 
Surroundings, the local net provides for information 
distribution through interconnected clusters of Standard 


Terminals or other existing office information systems. 
Primary objectives are shared electronic files, electronic 


lis. 





mail, word processing and shared information processing." 
[Reft. i: pp. 1-10 ] 


Die m—ilipmemMemrerng oupport Plan notes that the multi-user 
Gapabilities of the Standard Terminal resemble network 
connectivity, and that clusters of Standard Terminals could 
be interconnected in a ‘message mode’. However, this inter- 
connection and more advanced techniques like wideband 
channel local area networks “will not be pursued for general 
Coast Guard use through the mid-80's, although R&D evalua- 
meomewould certainly be in order’ [Ref. 2: pp. 4-10]. The 
meesons are given in a section titled "Future Technology 
impact on the Architecture’: 
"A number of promising technologies...have been excluded 
From this version of the support plan. The basic reason 
has been one of practical choice; the limited resources 
available to the program and the need for evolutionary 
growth dictate that higher risk or non-integrable ventures 
be excluded... 
Local Networks 
Mixed voice/data/video has potential payoff, but lack 
of control of most telephone installations makes this 
eer icult to exploit. Some use of this later in the 
@eeade will no doubt occur. (Ref. 2: pp. 4-20]. 
PaemeDIStricl is responsible for the design, acquisition, 
Operation and maintenance of information (voice and data) 
networks within the geographic boundaries of the district. 


[Ref. 2: p. 8-2]. The local net is not regarded as a piece 


of the IRM Architecture with systemwide impact. 
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E. SUMMARY 

We have given a brief overview of the Coast Guard's 
Information Resource Management Architecture, and 
established the central role of the Coast Guard District 
Office within that architecture. The present status of 
local networks for the district offices was examined; that 
"back burner" status is consistent with the Cc? Plan's 
perception of local nets as non-vital local utilities. 

[iire Coast Guard is still in the process of buying the 
equipment for the architecture, and at a rapid rate. That 
rate of growth is examined in the next chapter as an 
indicator that the Coast Guard will soon need to impose 
management controls on its servicewide information system. 
Later we will discuss the type of management controls best 
Suited to an information-processing system, and the 
advantages of prototyped development of those controls. A 
standard District Office Local Area Network, coupled with an 
auditable user authentication and access system, will be 
suggested as a mechanism crucial to adding management 


Pemerols to the IRM Architecture. 


ley 





It. COMPUTER GROWTH IN THE COAST GUARD 


EEE 


A. THE NOLAN MODEL 

One widely-accepted framework for understanding and 
Peeluating data processing (DP) within organizations is 
fame s Six-stage model for the introduction and growth of 
meemcata processing function within organizations [Ref. 4: 
pp. 76-89]. Figure 4 illustrates the six stages and their 
characteristics within each of four “growth processes". The 
climbing dotted line represents the level of expenditures in 
Mmeencotal DP budget for the organization. 

This model is a refinement of Nolan's earlier (1974) 
four-stage model based on the S-shaped curve described by 
feet coeveloping DP budgets [Ref. 5: p. 77]. The “transition 
point’ of the later (1976) model, shown in Figure 4 is the 
point at which a second S-shaped curve takes off. This 
occurs when the introduction of database technology causes 
renewed rapid growth of the DP budget. This later model 
assumes that initial applications do not employ database 
technology, and part of the increased expense after the 
Seto talOm POlMNE 15 EOr Ketroritting that technology. This 
Boch omemay limit the expense curve’s direct 
applicability to the Coast Guard IRM Architecture, given the 
c? Plan's stated emphasis on widespread use of database 


technology from the beginning in all applications. The 
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stages 


and general characteristics of the six-stage model, 


however, have been validated against experience with more 


than forty large corporations and should still apply to 


Coast Guard computerization [Ref. 4: p. 116]. 
e 
Sas 
°° ; 
e 
e 
e 
au 
Growth processes s 
’ 
=e 

Applications Functional cost Proliferation Upgrade Retrofitting Organizatien Application 

portfolio reduction documentation and existing Integration of integration 
applications restructuring of applications using appligations “mirroring” 

existing data base e information 
applications technology Ps flows 
® 
« 

DP organization Specialization for User-oriented Middle Establish a Data Data resource 
technological programmers management computer eS administration Management 
learning and user accgdnt 

teams e 
© 
s 
a nN rnc 
e° ¥ 
DP planning and Lax More lax Formalized e? * “ Tatlored planning Shared data and Data resource 
control planning and. @ and control common systems strategic planning 
control Pr ae \ systems 
‘ °° Transition point 
oe SSS SSS soe 
o° ° 
User awareness “Hands off” Superticig My Arbitrarily held Accountability Effectively Acceptance of joint 
enthus @stic accountabie learning accountable user and data 
Pd processing 
6 age 
Lavellof Sele ‘ accountability 
DP expenditures ee 0 0 @ ® ® 
Stage | Stage Il Stage Ill Stage IV Stage V Stage VI 
Initiation Contagion Control Integration Data Maturity 
administration 
Pigure 4. The Nolan Model of Organizational Computer Growth 


it eee ee ee Or Placing 4a COrporation's data processing 


Zin SaepemmtLemlar Growtm Stage involves two levels of 


benchmarks: 


Le 





"The first step is to analyze the company's DP expenditure 
curve by observing its shape and comparing its annual 
Growth rate with the company’s sales. A sustained growth 
rate greater than sales indicates either a stage 2 or 4 
environment. If data base technology has been introduced 
and from 15% to 40% of the company's computer-based 
applications are operating uSing such technology, tnen the 
company is most likely experiencing stage 4." [Ref. 4: 
pel 2) ] 


The second step involves evaluating the company's 
ememerocation portfolio against the investment benchmarks 
shown in Table II. famine cmoe, SOS support of 
operational systems, 20% support of management control 
eeoeems, and just a faint trace of support for strategic 
planning systems would show the organization to be at stage 


BemeiRef, 4: p. 124}. 


TABLE If. Applications Portfolio Investment Benchmarks 
tcrategic Management Operational 
olanning GOnLEO | systems 
Stage systems systems 
1 0 0 100% 
2 <1% 15% 85% 
3 <13 20% 803% 
4 5% 30% 65% 
2 10% 35% ohek- 
te) 15% 402% 45% 


B. BETWEEN CONTAGION AND CONTROL 
ime Smr hace Ene presemt growth stage of the Coast 


Guard m7 meee reecctunre 156 G@itficule, because there are no 
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accurate total IRM budgets prior to the establishment of the 
Gmerice otf eee, Moab wwommnie —Cperational costs of the Coast 
Guard-owned record telecommunication system (for example, 
Salaries) are still disguised as overhead expenses. Many 
powerful computers (up to and including mini-computers) have 
been bought for word processing, and don't show up in the 
budgets of the comptroller-based DP departments. 

A rough approximation can be made by simply counting all 
computers, and assuming that in the early stages of growth 
expenses are linearly related to the number of available 
processing units. The graph in Figure 5 shows the growth in 
Coast Guard ADP equipment during the last six years, based 
on the Coast Guard ADP Equipment Inventory. This inventory, 
which GSA (the General Services Administration) requires 
every agency to maintain, represents a current census of any 
and all equipment including word processors, which performs 
or supports directly Automated Data Processing. The second 
curve in the figure shows only those units reported as 
containing a Central Processing Unit, i.e. a microprocessor; 
BPhese are the actual ‘computers’ in the Coast Guard 
inventory, and they show the same rate of growth as the 
total hardware curve. Only 40% of the Districts had 
completed reporting their FY 83 figures at the time these 
statistics were compiled, but the figures as shown are 
Se edercriseve, of the Coast Guard in general. [Ref. 6] The 


Peotone vwMe in tne ELEiltsSt curve may be a result of 
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incomplete reporting rather than the end of a hardware 


seowth trend. 


USCG ADP EQUIPMENT GROWTH 
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Figure 5. Coast Guard ADP Equipment Growth 


Comparing Figure 5 with Nolan's DP expense curve in 
Figure 4 places Coast Guard computer growth in Stage 2, the 
rapid expansion phase labelled ‘contagion’. This assumes 
that the Coast Guard's total computer expenditures shows the 
same rapid growth illustrated for both total equipment and 


for CPU-equipped units. Since software is not reported in 
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the ADP Equipment inventory, the actual budget probably 
shows a higher growth rate than illustrated. 

The second step in the placement method isa look at the 
m@eagani zation Ss applications portfolio. Table III is a 
Bee Of tlagjos, information Projects of the Office of 
Command, Control and Communications, taken from the cs 
Pmipeort Program Plan {Ref. 2; p. 10-1]. Each project has 
been categorized by the organizational level it primarily 
memects. Fleven of these fourteen initial computer projects 
Peamerie Or improve operations directly. Three of the 
fourteen improve or support management control. According to 
Nolan's investment benchmarks in Table II, these figures 
Peeeertne applications portfolio in stage 3, the control 
stage. The current state of the Coast Guard IRM 
architecture is therefore between contagion and control. 

The rapid growth in stage 2 starts with the spectacular 
successes of the initial computerization efforts during 
stage !. The excess computer capacity usually acguired 
during the first phase, coupled with the lure of broader and 
more advanced applications, triggers a period of rapid 
expansion. Stage 2 represents a steady and steep rise in 
expenditures for hardware, software and personnel. It is a 
PomerodeOL Contagious, Unplanned growth characterized by 
growing responsibilities for the EDP director, a loose 


(usually decentralized) organization of the EDP facility, 
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pmoetei ee peiecreemeans Of Setting project priorities or 


Sevctallizing plans. 


Meir Lill. List of Major Office of c? IRM Projects 


MAJOR PROJECT 
Marine Safety Information System 
So1unme, Unttonrm Military Pay System 


Telecommunications Study - Combine 
Computer and Record Comms 


Ser ace Aucomation 
Command Centers 
District Minicomputers 


Shipboard Assisted Maintenance 
Planning (SCAMP) 


Yard/Supply Center Inventory Control 
Feante AGGuisition 


G-T Office Budget System 


Coast Guard Standard Accounting 
system 


User Responsibility (Chargeback ) 
Data Management 
Cobol Conversion 


Operations Computer Center 


CATEGORY 
Operational 
Operational 


Operational 


Operational 
Operational 


Operational 


Operational 


Operational 


Management Control 


Operational 
Management Control 
Management Control 
Operational 


Operational 


This stage often ends in crisis when top management 


becomes aware of the explosive growth of the activity and 


its budget, and decides to rationalize and coordinate the 


Siamese Of danmazation s EDP effort. The dynamic force of 


wee aowioloummarmes EMITS aT Eqairiy difficult thing to do, 
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however, and the growth seems to be continuing unabated. Top 
management frequently concludes that the only way to get 
control of the resource is through drastic measures, even if 
this means replacing many systems analysts and other 
valuable technical people who will choose to leave rather 
than work under the stringent controls that are imposed 
during the stage. Firing the old EDP manager is by no means 
an unusual step. 

Often what was a decentralized function and facility is 
rather suddenly centralized for better control. Often 
informal planning suddenly gives way to formal planning, 
perhaps arbitrarily. This stage frequently includes the 
first formalization of management reporting systems for 
computer operation, a new chargeback system, and the 
establishment of elaborate and cumbrous quality-control 
measures. In short, action taken to deal with the crisis 
often goes beyond what is needed, and the pendulum may swing 
moor rar. 

Based on his studies of corporations weathering these 
computer transition stages, Nolan indicates that for the 
most part, the problems that arise toward the end of Stage 2 
can be greatly alleviated by introducing right at the start 
of Stage 2 the techniques that companies ordinarily use in 
Seaye 3. Ret. 5: pp. 79-83] 

These Stage 3 controls are shown in Table IV as they 


were presented in the earlier four-stage model. Also 
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Peer Gemrewimmmelbto Ligure are the Stage 4 controls, 
specifically the data base policies and standards and the 
focus on computer services pricing for effective use. Later 
we will see that these Stage 4 controls are the type which 
the C? Plan would like to implement directly. For now the 
major points are that the architecture is approaching the 
control stage, and the early introduction of controls can 
greatly ease the crisis nature of the transition to Stage 3. 

In the next chapter, we will examine the concept of 
control generally, and the types of controls available for 
information systems. Some specific recommendations will be 
made for management controls consistent with the Coast Guard 


Penman conlitecture. 
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IIIT. MANAGEMENT CONTROL OF COMPUTERS 


A. CONTROL IN GENERAL 

Management control is a cycle that includes the three 
stages of goal setting, performance evaluation, and feed- 
back. These three stages of control are illustrated in 
Figure 6. (1.) Goal setting involves planning, and 
establishing the goals required for desired performance 
levels. Measuring and monitoring functions record actual 
beaitormance. (2.) Performance evaluation compares 
performance reports with goals. (3.) Feedback information is 
designed to make corrections in either goals or work 


femeieles LO Oring them into alignment. {Ref. 7: p. 310] 


Performance Reports 


2. Performance | 
Evaluation | Measuring and 
ilolebmsrehaniete, 


W. A 
3. Feedback 


Figure 6. Management Control Stages 





This cycle forms the heart of management control systems in 


N@Scewousinecsses, with the department or division budget 


28 





ol eminem mosctmoLethe goals, and the quarterly financial 
AeSeemeneprEeovtcging the performance information to be 


evaluated against the budget's projections. 


5. CONTROL AND CHARGEBACK UNDER CENTRALIZED EDP 

Although the expense and the technical complexity of 
computers has sometimes obscured the point, this general 
fiemdel of Management control can be applied to control an 
Electronic Data Processing department as directly andas 
well as any other department. Top management has two main 
@emeermns in controlling the EDP department: 


1. Are we spending too much, or too little, or just 
enough on EDP? 


2. Is the money we have allocated to the department being 
properly spent? 

To answer these questions, and control EDP, top manage- 

ment needs two key structures. The first is a financial 


reporting system that allows it to do the following things: 


1. Review the department's performance on a periodic 
basis. 
2. Compare the department's development against the 


formal plans for it. 


3. Check the functioning of the department's project 
control systems. 


The second is a structure that links the responsibility 
for various departmental decisions to the operations of the 


users--ordinarily other company departments. Generally, this 
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Teaco lm iwomecedure to account for EDP expenses, either 
Smeorcharcge- out Or an Overhead basis. (Ref. 8: pp. 70, 83] 
As in other business activities, the key performance 
Pore Geni @niticderon IS Eimancial; for EDP it 1s used to 
track both the department's performance against its own 
goals (department budget and project control system), and 
memcegree and mix Of its Support to the other departments 
(chargeback system). Two weak spots in financial control 
systems for EDP departments have been project control for 
software development and user chargeback systems based on 
computer resources and terminology. Developments in software 
Seommestimation, like Boehm s COCOMO (Cost Control Model), 
and technigues like structured programming and programmer 
teams have greatly reduced the difficulty of estimating and 
controlling software development projects. Computer-oriented 
chargeback systems which give users detailed reports of the 
CPU-seconds, main and secondary memory units used, etc., are 
gradually being displaced by user-oriented systems as 
Swlmemier services become crucial to the "bottom line" of 
most operating divisions. The reasons for these new systems 
will be discussed later. 
The financial basis of management control of EDP 
departments has two important implications: 
1. As a general rule management control systems for data 
processing cannot be significantly more advanced than 
the management control systems used for the company as 


a whole. Since accounting systems provide the 
foundation for management control, management control 


30 





Soe seeeteecre ene GCuality of the accounting 
pian spref. 9: pp. 311, 315] 


2. The development of data processing accounting systems 
fe iar coOuUnEIhg problem rather than a data 
processing problem because basic accounting concepts 
are most important. Unfortunately, this need for 
accounting skills is not recognized from the start. 
Usually, technical personnel play the dominant role in 
designing the initial DP accounting systems. Rather 
quickly, however, it becomes apparent that the real 
problems are financial accounting problems concerning 
responsibility centers, costing, and allocating costs 
to responsibility centers. Accounting personnel are 
then brought into the project. 

These fundamental problems seriously hinder the 
effective design, implementation and administration of 
computer use chargeback systems. Simply stated, you cannot 
build a sophisticated control system on a sandy foundation 
of weak accounting systems. Pheer. 92D. 315 ] 

1. Evolution of Chargeback Systems 

Computer chargeback systems were originally 
accounting devices to allocate the costs of a very large 
capital investment among the departments that used it. When 
most of the processing was large batch jobs, a relatively 
Simple system could price batch jobs according their use of 
computer resources, as reflected in reports from system 
monitor programs. 

Differential pricing began as an efficiency measure, 
to boost use and distribute the workload on the computer 
more evenly by charging less for jobs run during the evening 


and night shifts. Once the computer was fully scheduled 


(and more) it became a scarce resource; prices were further 
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G@em@erentiated, and coupled with a priority system for the 
Teowemadlemsetves, to Control and monitor the competition for 
the now-scarce computing time. 

An important transition was made as the 
@manization s Goals changed from efficient (full use) to 
effective (most necessary jobs) use of the computer system. 
The management control purpose of the chargeback system was 
expanded to include shaping the behavior of users. 
Information not necessary to proper computer operation, i.e. 
job class and priority, was added to jobs and the operations 
monitoring programs were changed to record it. The range of 
choices available to the user department grew, but the costs 
of those choices were determined by the EDP department, and 
still largely based on recovering the actual costs of 
equipment and operations. 

A priority system and a single scarce resource 
implies that some jobs never get scheduled. An alternative 
to the central EDP department came about as decreasing 
equipment costs allowed time-sharing and computer service 
bureaus to develop, and it became theoretically possible to 
Z-teali scomouter proyvects accomplished without a major 
capital investment decision. Rather than competing for use 
of the single company computer, projects could be subjected 
to the same cost/benefit analysis used for other business 
projects in the firm. For the first time, make-or-buy 


analysis (whether to do a job yourself or buy it from 
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someone else) could be applied also. This open market of 
SeImecete ton co tae central EDP facility radically changed 
the management control uses of the chargeback system again. 
An open market fosters competition through price, and allows 
the chargeback prices to be used to judge how efficiently 
the EDP department delivers computer services. The 
almost totally transferred to the user departments, as the 
organization's experts on the business benefits of a 
Baetrcular application. Currently organizations require the 
chargeback system to isolate as completely and clearly as 
possible, the actual costs of the specific application. The 
prices must be refined to eliminate the variances due to the 
operation of the computer department from the actual 
Bemeecauences of the consumer's’ use. This provides to the 
user the best cost information with which to make a sound 
Gost /benefit decision for the company. Chargeback is also 
used to evaluate the user for efficiency in the use of 
computer resources in accomplishing his or her business 
mission. 

Both the financial accounting and the computer- 
resource accounting abilities of the organization have had 
to mature to accomplish the expanding management control 
Purposes of chargeback in an increasingly complex 
environment. AS the responsibility for effective and 


Peeve ronemusc Or COMpULINg resources shifts to the user 
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departments, they have demanded that charges be expressed in 
units they can understand and effect. Applying industrial 
accounting techniques allows the allocation of the resource 
costs per job (CPU-seconds, tape and disk drive hours, main 
and secondary memory) to be priced out as standard costs per 
work unit (cost per check, per invoice, per personnel record 
update). These standard costs can be accumulated by section 
or office within a department to support a finer degree of 
Semerol. 

The implementation of management control through 
chargeback is a dynamic process. Studies of the process have 
developed four criteria for judging chargeback systems: 

1. Understandability: 
To what extent can the manager associate charge-out 
costs to the activities necessary to carry out his or 
her tasks? 

mee COntrollability: 
To what extent are the charges under the control of 
the user? 

cme Accountability: 
Are costs and utilization of computer-based systems 
included in the performance evaluation of the user? 

Pee ost, benefit incidence: 
Does the user responsible for task accomplishment also 
receive the chargeout bill? [Ref. 9: p. 317] 

In addition to evaluation criteria, these studies 
have produced several vital general observations. One 
mistake frequently observed in designing an effective system 


is to impose sophisticated controls upon organizational 


Tw omeiicdmmese Tot ready . The organization unit is not 
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Bere SaeeCom@ecels famagder its operation or if personnel 
cannot clearly see the relevance of the controls to their 
Beoplems. [Ref. 95 wp 311] 

Chargeback systems also evolve. They initially are 
directed at high-level managers. Summary data processing 
bills are sent to divisional controllers without much 
information on the charges being conveyed to end users. With 
maturity, the charge-out systems become more sophisticated 
and permit detailed bills to be sent directly to low-level 
users. It is important that a chargeback system does evolve 
through successive phases so that users and DP managers can 
Wearn how to interpret and use the information. It is 
especially important that the means for accountability be 
coordinated with the expectations for accountability. Users 
resent charges for systems they cannot affect. 

Management's objective is to develop a strategy that 
will increase the maturity (and effectiveness) of the 
charge-out system at an appropriate pace for the major user 
groups. It is likely that several charge-out strategies may 
be required for the different user groups. Rees eb. 3.16) 

2. oummary 

In the process of developing management controls for 
the Coast Guard IRM architecture, the lessons we can 
transfer from the experience of centralized EDP include: 

1. Management controls for EDP are financial in nature 


MiCmeatnommECconmatamle CO the controls on other 
Ge ea mime mts. . 
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Pee mere navema stronger base in good accounting than in 
technology. They can therefore be no more complex than 
the accounting and management control systems of the 
Ec emer ne or GaillZation. 


3. A chargeback system is essential to management control 
of EDP departments, and eventually, EDP users. 


4. Chargeback schemes grow and mature. Management must 
develop a strategy to manage this process at an rate 
appropriate to the major user groups, and to changing 
Management control needs. 

fomemoortant although not obvious point is that the 
pemmetttion for computer services described here takes place 
in essentially a single arena. The goods and services 
(reports, database queries, CPU cycles) are almost perfectly 
interchangeable, between the daytime on-line version of the 
payroll and the late shift batch run of the same program, 
even between the in-house product and the service bureau 
version of the same printout. Competition by price is a 
logical basis of comparison of substitutable goods in the 
same open market, whether in keeping the EDP department 
‘honest', or in the user's trade-off between alternate ways 
of implementing a given project. AS a management control 
technique, it assumes that everyone knows all the prices 
(perfect knowledge) and knows the substitutability of 
various goods, so changing the relative pricing should 


logically effect behavior. 


C. EXPANDING EDP TO IRM AND REFINING CHARGEBACK 
Information resource management obviously entails more 


than controlling a centralized data processing center. The 
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Pelee ciemcmnhasm@etined it to include all information 
processing: transactional and operational information, 
office automation as well as data processing and voice and 
data telecommunications. This expansion means it includes 
mime Strassman defines as a second major sector of 
information processing, "administrative processing", which 
he says is largely ignored by information-processing 
executives: 
Wiha We it accounts for the largest and most frequently 
Mseq set of tools and facilities for handling information 
transactions, it is rarely aggregated under a single 
expense heading. It includes everything from typewriters, 
word processors and dictating equipment to telephone and 
Telex networks, recording devices, copiers and duplica- 
tors,facsimile transmission devices, microfilm equipment, 
and even such relatively mundane necessities as office 
supplies, mail, and simple filing systems. These adminis- 
trative tools are quite diverse and often isolated from 
one another, so that the expense involved in their use 
tends to become highly diffused. Historically, little 
trade-off has been possible among such individual office 
Mmeechnelogies”. [Ref. 9: p. 295) 

NG Organizational unit is responsible for integrating 
these noncomputer aspects of information handling, but the 
fastest expense growth in the office environment is 
Seetreringemere. LE an O©rganization intends to control rising 
expenses for ‘white-collar automation', information systems 
management must expand to include careful expense accounting 
for tnese diverse office technologies. This control must 
also be in some flexible automated form, since the future 


volume of information transactions is uncertain, as are the 


relative importance of various cost elements, rapid changes 
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PE omncomoacy cnc saa iting attitudes toward office 
automation by labor and government. [Ref. 9: p. 296] 
Dect rOommEEOmnEie f2mecreased size of the total 
information system, and a greatly increased number of 
transactions, we are annexing an area where the costs are so 
memeoad Cut as £O be hard to accumulate. The management 
@emerol job will be further complicated by the lack of 
direct tradeoffs between the products of some of the 
Subsystems in the architecture. For a price-based control 
system to work, some indirect measure of substitutability 
among the systems will have to be developed. Considering the 
massive volume of transactions, the entire control system 
must be eventually completely automated. It 1S more 
feemomoriate to call it an ‘information pricing system’ 
rather than ‘chargeback’. A good encapsulation of the 
ultimate goals of such a control system is Strassman's list 
of the objectives for a top information executive in today's 


pescamess environment: 


* Ensuring the integration of data processing, adminis- 
Pte OLOcessimg, and Office labor productivity 
programs. 

* Iga inoaeccOouMmeimg, Gost-control, and buddeting 


innovations that will subject all information systems 
overhead activities to the disciplines traditionally 
applied to direct labor. 


i Subjecting office labor automation programs to 
analyses comparable to those applied to all other 
forms of capital investment. 


29 Conceiving organizational designs that will permit 
information to be handled as a readily accessible and 
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pac epElcea commodity rather than as a bureaucratic 
possession. 


* Creating within the organization an internal market 
(Owe eominemitroOrmaclon Systems products, so that 
trade-off decisions, even technologically complex 
ones, can be decentralized into the hands of local 
user management. 

* Fostering a technique of pricing that will allow 
decisions on introducing new technology, or abandoning 
obsolete technology, to be made on a decentralized 
basis. 

* Installing and monitoring measurement methods that 
will protect improvements in productivity achieved by 
automation programs. 

These are the ultimate, not the immediate, goals of any 
proposed management control system for a complete informa- 
tion system. By examining the purposes and evolution of EDP 
chargeback, and projecting the requirements for information 
systems control for the future, we have set the stage for 
considering specific recommendations for management control 


requirements of the Coast Guard Information Resource 


Management Architecture. 


30 





tj eco mnouenRGOULREMENTS OF THE ARCHITECTORE 


2 em gg pe ee me 


A. SUGGESTED MANAGEMENT CONTROL REQUIREMENTS FOR THE COAST 
GUARD INFORMATION RESOURCE MANAGEMENT ARCHITECTURE 


To pave the way for a smooth transition to the control 
stage of computer growth, the Coast Guard should soon 
develop the information or systems necessary to meet the 
Following five requirements: 

1. Aggregate financial information 

2. <Auditable identification of users 

3. Meaningful chargeback system(s) 

4. Meine Onumatlon maznketplace 

5. An information decision-making tool 
Each of these will be explained in detail below. These 
Suggestions assume that major hardware subsystems (l.e. 
Mainframe or minicomputers, communications network 
interfaces) will have resource-accounting monitor programs 
installed. 

im AGgeegate Financial Information 

Since the primary support of budget-based management 
Pemrmsoleovstems 16 good accounting, the Coast Guard 
accounting system should be modified to allow for 
information costs to be aggregated, both by organizational 
Melee Teecenceb te Vt Sion Or a Section of a District Office) 


Paemmoy cemprEejyect Tdentifier (Project D17-21, Develop 
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Seemeionhsm=atabase). The current joint project of the 
Oriiae of c? and the Office of the Comeeroller co develop 
and automate a Coast Guard Standard Accounting System should 
address whether a separate Operating Guide (OG) or a Subhead 
mommeeded to identify information funds, or whether an 
Sect Code identifier holds enough information and 
Meer bility Lor complex financial reporting. A unique 
[lemeirication of the funds as information funding, along 
With a system or project identifier, and a capability to 
retrieve by organizational subunit will support the reports 
necessary to monitor and control both the IRM function and 
the end users. An identifying field of this sort would 
support “information budgets" easily when cost control 
oecomes necessary. It also would function partially as a 
common denominator for the information services, supporting 
tradeoff decisions and preserving information savings for 
the information-efficient manager to spend on other 
information services. 
2. Auditable Identification of Users 

A basic concept in any branch of accounting is the 
Piembentcrall, the ability to reconstruct for any entry in the 
record, the series of transactions that originated or 
altered it. Conversely, for any original entry or 
transaction the audit trail tells you which permanent 
records it affected. The financial nature of management 


control that we have developed insists that the user 
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ame torazeomTonmeand 1dentification structures used in the 
various subsystems of the IRM Architecture be auditable, 
that they maintain or can reconstruct a complete audit trail 
from end user to ultimate database. 

Miia ho 1nsuring auditability of IRM 
financial accounting and chargeback, an auditable user 
identification scheme reinforces system security, and by 
increasing the perceived threat of apprehension, strengthens 
the policy and procedure controls of the system. Another 
perception that benefits from secure identification is the 
perceived equity of the chargeback system. Since not all 
users nor all applications can be equally important to the 
Organization, the most a chargeback system can hope for 1s 
Meemeeived equity’. [{Ref. 10: p. 260] An auditable access 
scheme documents for the user that the charges received did 
Mienaiiate in his/her department, and reinforces a perception 
of equity. 

The high degree of telecommunications in the IRM 
Architecture, with some systems oven to several networks, 
means that simple password systems will not provide adequate 
protection. This communications vulnerability is aggravated 
by the periodic transfers of the Coast Guard's military 
personnel. User accounts are often only logical partitions 
in the same computer, accessed by a network common to 
several physical user sites. Passwords could not protect a 


filespace from an old authorized user at a new duty station. 
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Some hardware identification (such as a terminal identifier) 
at least needs to be added to all systems. To preserve the 
audit trail, space for this terminal identifier and the user 
i.d. needs to be designed into network message headers. Once 
the access and message header configurations are frozen, the 
incremental costs of mecuinc security and auditability will 
be much higher, as will the temptation to forego the expense 
and rely on procedures alone for control. 
3. Meaningful Chargeback System(s) 

The goals of a meaningful chargeback system are to 
express the costs of information in the terms of the user's 
units of work, and to understandably identify, accumulate, 
and return to the user all information costs associated with 
his/her work operations. Ultimately, such a system would 
completely satisfy all four of the evaluation criteria 
listed in Chapter III. The system administrative overhead 
necessary for the financial reporting and user 
identification requirements just discussed will also enable 
a user-oriented chargeback system to be implemented, as a 
third benefit to offset those same costs. 

One possible implementation of such a chargeback 
scheme is as an interface accounting program, which would 
accept inputs from the various subsystems, sort them by user 
identification, cross reference with user budgets and 
MariorcblOWmmme@tals, and produce a average cost per 


transaction type, detailed to identify information subsystem 
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Gost s. Such a system would have to be both modular and 
flexible by design, to allow subsystems to be added and 
removed as configurations and technology changed. Locating 
it as close to the user as possible in the architecture 
pommtcs alloweall “higher systems to run "off-the-shelf" 
computer resource monitors, modified only enough to record 
both user and terminal identifications. 
Pee wen ounat ton Manxetplace 

Users could make trade-off decisions rather easily 
when the services were all available from one source (the 
EDP department), or even were direct substitutes for each 
other (service bureau versus in-house, for the same 
product). The number of alternative information services, 
and the number of ways to obtain them are both growing 
rapidly, even within the unifying device of the IRM 
Peeemitecture,. Strict dollar cost is not an accurate basis 
hOG COmparison or competition any longer. The C? Supe or C 
Program Plan identifies timeliness, quality (accuracy and 
precision), quantity, and cost (of collection, transmission, 
storage, and use ) aS components of information of interest 
to tne Coast Guard [Ref. 2: pvp. 5-1]. Few among user 
management will have the information judgement to evaluate a 
straight cost for service against its value along those four 
parameters. Some set of adjusted prices, or factors by 
which to weight costs will be necessary to create an 


information marketplace where products and services of the 


44 





various information subsystems can be directly compared. 
Mae User is the expert on the benefits to his program that 
Miveweservice will provide; the architecture will have to 
Beovide him/her a basis for properly comparing and 
Peluating the costs of that service, if the Coast Guard 
intends to hold the user accountable for an effective and 
efficient decision. This could be as simple as a set of 
Mmmseeasgmices £Or a Generic example, (1.e. the average 
letter costs 2.6 times as much as a message) coupled with 
substitution rules and judgement criteria (letter vs 
message: consider speed and security), or as complex as a 
database of currently-calculated weighting factors available 
to an automated decision-making tool. 
i oa tCnrormeation Decision-making Tool 

In addition to creating the information marketplace 
by publishing a list of adjusted or general substitution 
prices, the system should provide a consumer's guide to 
proper shopping. This will insure the most effective 
accomplishment of the IRM architecture's management control 
mission through pricing and chargeback. 

It is to the Coast Guard's advantage to have users 
making the most effective and efficient information 
decisions possible. The user/manager is best qualified to 
make the cost/benefit comparison of alternative information 
services. The goal of the chargeback system is to provide 


that user/manager the best possible cost information to 
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combine with his best possible benefit knowledge, and then 
hold him accountable for the decision. The manager will 
develop an information decision ‘support system' for these 
decisions, if only a set of notes on how the last one was 
done. There will be a faster learning curve and more 
consistent results if the IRM architecture recognizes this 
and supports the manager's decision by some standard means. 
A published set of suggested procedures (cookbook 
guide) could couple with a price list to produce trade-off 
decisions standard enough to be comparable and reproducible. 
Eventually, a spreadsheet program able to access a 
substitution price table, or to calculate weighted prices 
from the chargeback information could be developed. Some 
project lifecycle guidelines could be incorporated in such a 
program painlessly. In whatever manner, some decision 
Support should be developed. To have management control 
through pricing and chargeback work properly, we assume the 
goods are substitutable, and the consumers have perfect 
knowledge of both price and substitutability. We further 
assume they will make the logically best choice. These last 
two suggestions for the IRM architecture (information 
marketplace and decision support) attempt to insure those 
assumptions are met, and to assist the user in the choice 


SeSm@mnor Mise unit and for the Coast Guard. 
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B. IMPLEMENTATION SUGGESTIONS 
i. Liemoimamcanrdi zed User Interface 

Inasystem as large and as distributed as the Coast 
Guard IRM Architecture, operating under Federal rules for 
competitive procurement, it is almost certain that the 
various subsystems (both hardware and software) will be 
developed separately. Unless specifically controlled, the 
interface each subsystem presents to the user will vary from 
one subsystem to another. The interface includes such things 
as the location and size of text, the method of specifying 
commands (numbers, letters, words), the method of presenting 
options (text or a menu) and other guidelines to the user 
wom LMpUC, 

At the extreme range of variation of these inter- 
faces, an identical command will have different meaning and 
effect in two different systems which a single user 
routinely accesses. (For example, STOP in one system halts 
text scrolling on a display screen, in another it ends the 
session.) 

Specifying a standard user interface to be 
maintained by all subsystems simplifies learning and use of 
the entire coordinated system greatly. It provides a 
mechanism for the smooth introduction of change as well, by 
preserving for the user as much of the familiar as possible 
aS an environment for the new function or command. A major 


advantage is that once an effective user interface for a 
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given system or subsystem is developed, that design can be 
"Erozen’' from change for a while, preserving the 
effectiveness of the interface through other system changes. 
We have seen that chargeback and management control systems 
change to match the maturity and growth of the information 
system overall. Expecting that change, a standard user 
interface should be developed and incorporated in all 
Mieomated POrtions of the control structure of the IRM 
architecture. 
2. Prototype/Iterate/Adapt 

We have already characterized portions of the 
proposed management control structure for the IRM 
architecture as a decision support system for the user in 
purchasing information services. Mivaermtookh could also 
function as a decision support system for the organization 
in choosing those prices which will produce the desired user 
behavior. A proposed new price for a single service could 
be tested by running the user's decision tool program with 
that price as an input. The price could be adjusted until 
the desired decision was reached, or the model could be run 
‘backward’ to determine the specific price change required. 
Developing the Coast Guard IRM management control structure 
shares much with the development of decision support 
systems, as characterized by Keen [{Ref. 11: p. 132]: 


x Neither the user nor the builder can specify 
functional requirements in advance. 
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i Users do not know, or cannot articulate what they want 
and need. They need an initial system to react to and 
improve upon. 


* The users' concept of the task and perception of the 
nature of the problem changes as the system is used. 


* Actual usages (of DSS ) are almost always different 
from the original intended ones. In fact case studies 
show that many of the most valued and innovative uses 
could not have been predicted when the system was 
originally designed. 

x Intended users of the system have sufficient autonomy 
to handle the task ina variety of ways, or to differ 
in the way they think to a degree that prevents 
standardization of process. 

Several studies [Refs. 12, 13, 14] suggest that the best 
method for designing a system in such a loosely-defined 
Situation is by an iterative design process. The steps in 
the process include: 

1. Identify an important subproblem. 

2. Develop a small, but usable system to assist the user. 

3. Refine, expand and modify the system in cycles. 

4. Evaluate the system constantly. 

This design approach starts with an prototype system, which 
adapts in successive iterations to the user's and the 
designer's experiences. By definition it is flexible and 
adaptable. This method is proposed as a design alternative 
to classic system life cycle design, which attempts to 
define all possible system requirements in the initial study 
phase, and then delivers a specific system to satisfy those 


requirements. A major change in such a system requires a 


return to the study phase and a new set of requirements. An 
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advantage of iterative design is that several different 
wie DrOotoOuypess can be run in parallel, and evaluated 
before selecting a standard model for system-wide 
implementation testing. 

The various programs and systems to satisfy the 
management control requirements previously listed, with the 
mmemobe Exception Gf the structure for aggregation of 
financial information, should be developed using this 
iterative design methodology. The complex and ill-defined 
nature of the control problem, plus the need for the control 
system to continually grow, support using a method focused 
on development of poorly defined and flexible systems. 

The appropriate place to initially install the prototype 
systems to begin satisfying the proposed management control 
requirements is at the level of the District Office, fora 
number of reasons which will be fully developed in the next 
chapter. An implementation incorporating several of the 
necessary control elements into a District Office Local Area 


Network will also be described. 
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V2 (la, Dow ber OFFICE LOCAL AREA NETWORK 


IMPLEMENTATION OF MANAGEMENT CONTROLS 


Peeeenay THE COAST GUARD DISTRICT OFFICE 

The major reason for placing the management control 
structures of the Coast Guard IRM architecture at the level 
of the District Office is to remain congruent with the rest 
of the organization. The District Office exercises manage- 
ment control over every other operational program and staff 
function. In the financial chain, for example, the District 
Comptroller approves operating unit budgets with the 
@emeurrence of the district program manager. Ens 
memmieiastrative information control, all official 
correspondence and reports enroute from operating units to 
Headquarters must be endorsed by the district program 
fieeoet 1m the Chain of command for the originating unit. 
Management control of the information program logically 
belongs at the District Office as well. 

The District Office is the level at which hierarchical 
information is aggregated for forwarding to Headquarters, as 
illustrated in Figure 3. The Coast Guard District block in 
the IRM architecture (as illustrated in Figure 1) is also 
the system node with the most connections to other networks 


and units. This center of connectivity is the best place to 
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easily collect a maximum amount of data about computer and 
communication systems usage. 

iaeieie i nctamebartonm Of mMinicomputers in each of the 
twelve Coast Guard Districts scheduled for FY 86, the 
processing power will be available to run the monitor, 
accounting and user identification programs necessary to the 
prototypes. There will also be sufficient data storage 
capacity available to accumulate an historic data base on 
usage and usage patterns for information services. 

People resources are at the District Offices as well. 
The District IRM officers are in place with the knowledge to 
run and evaluate the prototype control systems. The other 
district program managers make up a team of knowledgeable 
control-oriented managers ready to fully test the various 
prototypes and suggest changes. Because of these program 
managers, the IRM control problem at the District office 
will be the most difficult, and therefore the richest in 
terms of votential learning about user requirements. 

The district program managers are management controllers 
themselves, of units and programs for a geographic area. A 
major mission of the district IRM staffs will be teaching 
them how to use information services in exercising that 
management control. As the need for control of the IRM 
architecture grows, the district IRM staff's job will become 
controlling these other controllers, and through them their 


units,. to promote more efficient and effective use of 
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Mieeenrtrommseryilces. The district IRM office is the turning 
Pepemaeewaei comtrol within the vertical structure of the 
Miionmnattom progmam (the LRM architecture) must translate 
immommiorauwontal control (by the district IRM staff) of 
resource distribution and use out to the district managers 
of other programs. They are the logical office to task with 
@embculating and distributing the chargeback bills to the 
eer ict program managers, both for information services 
meeetvea from the District, and for an allocated portion of 
other services (i.e., HO database usage) being billed to the 
District. These bills will be a primary control device of 
the architecture. The user is understandably apt to feel 
unfairly treated when the people who developed and fed his 
growing dependence on information services begin blaming him 
(holding him cost responsible) for overuse of those same 
services. Early placement of the control structures would 
allow tactics such as distributing ‘educational’ chargeback 
bills which remind users that they are not using a free 
good. It would also make a usage history available when the 
first aggregated chargeback bills to the District show up 
from the Headquarters databases, to substantiate equitable 
apportionment of the cost by the District IRM staff. 

The District Office is the node of the Coast Guard IRM 
architecture where it all comes together. Satisfying the 
management control requirements of that architecture at the 


District Office level is the crucial problem for control of 
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the architecture overall, and an early start on the problem 
may ease a difficult transition from teacher to tax man for 


mmemadistrict IRM staff later on. 


B. WHY THE LOCAL AREA NETWORK 

Throughout the thesis we have been attempting to develop 
the need for, and requirements of, management control 
structures for the entire Coast Guard IRM Architecture, as 
one large but integrated system. That integration 1S an 
express intention of the Office of c?: 


he IRM architecture and other policies of the (Office of 
C~) program discourages the proliferation of field-unit 
terminals connected independently to single-program 
central data bases. This would be an electronic version 
of our present uncoordinated, overlapping, manual 
information system." [Ref. 1: pp. 4-7] 

While the management control requirements we have 
developed are applicable and useful to any of the single 
vertical information systems within the overall architecture 
(e.g. Personnel Management Information System (PMIS), Marine 
Safety Information System (MSIS)), they are also powerful 
devices for logical integration of these separate systems 
into a single architecture, from the user's point of view. 
Peele ecenmowsh Enis wntegration, the controls must be 
applied, or at least appear to the user to be applied, asa 
Single part of a unified architecture. 

To those who have read the various planning and support 


documents of the IRM architecture, it is a logical whole, 


and its integration of systems is obvious. However, if the 
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Meee t emer] 7etem GCOonrtronts a different interface screen 
and different sign-on procedure for each of the subsystems 
(PMIS, MSIS) he or she uses, and if each of these subsystems 
returns a separate chargeback bill which the user must 
"integrate" with a hand calculator, then the IRM 
architecture has not achieved its ‘single system’ goal. 

The single physical device connecting all the 
information resources of the CG District block, in the 
Figure 1 illustration of the architecture, is the ‘local 
net', the District Office Local Area Network (LAN). When 
fully operational, this local net will be the port through 
which all district information services can be accessed. 
Application of the IRM architecture's management controls 
through the LAN uses its physical integrating power to 
create and reinforce the logical unity of the overall 
system. It collects the separate shopkeepers of the 
PMemeuiaual IntOrmation systems into an information 
marketplace where control through pricing can be most 


SeeeCcthlvVe £or the entire architecture. 


eee MEBTING THE REQULREMENTS WITH THE LAN 
Fach of the management control requirements will be 
discussed separately below for a configuration that assumes 


an operating local area network is in place. 
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le Ag@megate Financial Information 

While no physical program or device is needed to 
satisfy this requirement, the necessary changes to the 
financial accounting structure will need to be defined 
Memeore the design configuration is frozen for other, 
automated portions of the control structure. The accounting 
changes may add extra data items, or expand the size of 
existing data items, throughout the architecture, to ensure 
miat che information necessary for the audit trail and for 
project-level aggregation of information costs is 
maintained. For example, adding a field to a message header 
to hold a project identification may change hardware and 
software throughout the system. 

2. Auditable User Access 

The District LAN is the IRM system entry port; user 
and terminal identification should be demanded and tested 
here. This begins and maintains the audit trail at the point 
of first entry for all users at or below the District Office 
level. Once the user is authorized access to the network, 
the network can then access all subsequent communications 
links and computers, providing the appropriate access 
information and identifying the user and terminal to the 
other systems. 

This eliminates the problem to the user presented by 
a multitude of different access procedures for each of the 


different intermediate services. For example, to access the 
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ieee tonweeeinsotrmMation System computer in New York, the 
user must dial the local number of GTE TELENET, and comply 
with their sign on procedures, providing an account number 
and a password, then requesting the connection. Once 
connected to the OPINS computer, a minimum of three more 
Memeand password combinations are necessary to reach a 
working level successfully. The importance of the informa- 
tion involved justifies the security, but the tedium to the 
user has prompted the OPINS configuration managers to 
authorize an programmable modem (computer communications 
device) to be installed in their systems. This modem then 
allows a user to access the remote computer with the push of 
a single button. The protocols, identification numbers and 
passwords are all programmed into the modem, and 
automatically presented to the necessary subsystems. The 
audit trail is lost--the system cannot record a unique 
identification (number, password and terminal i.d.) of 
whichever user pushes the button. Satisfying the 
requirement for auditable user identification at the initial 
access to the District LAN would preserve the utility of 
automation such as this while not losing security or 
auditability. Overall system security would actually 
increase by recording the user identification data provided 
to the LAN by people repeatedly attempting access to systems 


for which they were not authorized. 
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This automation provides more than user convenience. 
The various information subsystems (PMIS, MSIS) are reached 
via different communications networks, and once accessed 
have different password procedures and file structures. If 
the user must record and maintain the access information for 
each system separately, then the fact of their separateness 
as subsystems is reinforced each time any subsystem is 
accessed. If the various subsystems all appear as selections 


Boman Access Menu" 


once the user has signed on to the LAN, 
they are reinforced as parts of a unified system. 

One alternative to LAN user identification data 
capture is distributing unique identifiers and passwords for 
all individual units at the destination end, (i.e. OPINS) 
and auditing use for chargeback there. Administering both a 
billing and a password maintenance system adds 
administrative overhead at the highest level of the 
architecture. Collection of the usage data is removed from 
the level of enforcement of the charges, and the user's 
perception of autonomy and system equity may suffer. 

3. Meaningful Chargeback System 

A meaningful chargeback system provides information 
useful to the user. While the initial chargeback systems 
Will not be refined enough to track each user in detail and 
express all costs in terms of the user's work units, the 
‘useful information’ goal can be preserved during the 


iterative development of the chargeback system, and this 
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Pee On mE Oo, Can breintorce the concept of unity for the 
architecture. 

For example, consolidating and keeping track of the 
weeerate Information service charges against a user 
division's total information budget (telephone, Xerox, 
microcomputer supplies and maintenance, etc.) would be 
useful to the user while reinforcing logical integration of 
these (now) diverse services. A program available through 
Mmemilerwork to extract such accounting data for a given 
user, producing an up-to-the-minute status for his/her 
information budget would do much to associate resource 
Meeoumeing With information rather than bills. Such a 
program would only require a standard query to the 
accounting database on the District minicomputer. Having the 
program available through the LAN allows IRM managers to 
track how frequently the program is used, as a rough guide 
to the ‘information awareness’ of the entire staff or a 
given division. 

Often, before actual charges for system use are 
levied, the chargeback system is used as a device to notify 
users of the level and cost of the information service they 
consume. [Ref. 15: p. 114]. As each of the various 
Subsystems gains resource accounting and reporting 
capabilities, their usage data could be added to the 
chargeback or ‘budget status’ report. The transition to 


actual charges would be a gradual change, and the user could 
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Meee mbourmmenarges sand Usage data in context. The single 
paeiciotmaopert (bil) would reinforce the logical system 
unity, and the LAN could make it a recordable and easily 
accomplished event. 
4. An Information Marketplace/Decision oom 

The marketplace concept is an attempt to identify 
the functions and costs of the information services, and to 
identify the substitutions possible between them. It intends 
to develop in the user a holistic view of information 
precessing and to influence his/her conduct with pricing. 
If functionally similar services are available through the 
LAN as a series of substitution lists or function menus, the 
physical presentation strongly reinforces the logical 
integration and substitutability the management controls are 
trying to develop. Rather than remembering that electronic 
mail and/or record communications messages can substitute 
for hard copies on letterhead stationery, the user chooses 
Smoot thie Other from an “Output Menu” and the network 
delivers the user's document to the appropriate device. Or, 
the user could select several options and compare their 
pee@es before Committing the document for delivery. The 
decision tool could be incorporated as a “How Much?" command 
available to compare possible choices in terms of 
information dollar costs. Not all of the options need be 
physically connected to the LAN. Telephone calls are a valid 


substitute for letters, but may not be directly available 
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through the system. As long as their prices appear in the 
decision tool models, and they are listed as alternates on 
memeap propriate function (Input, Output, Send, Analyze) 
menu, services like the telephone and the stand alone 
microcomputer will be included in information marketplace, 
and therefore subject to the management controls of the IRM 
architecture. 

Again, if the information decision tool is available 
through the LAN, its use can be recorded as measure of 
information awareness. If the LAN can access the separate 
communications and information subsystems to connect users, 
it can also access those subsystems to get current pricing 
and usage statistics for incorporation in the information 
decision tool models. 

The function menus insure that the user is reminded 
of the possible substitution alternatives at the time the 
choice is made. The decision tool insures that the best 
possible cost information is available to support the 
choice. Satisfying these requirements at the District LAN 
interface insures the choice is among all the options and 
all the information services available to the user's 
purpose, within the whole architecture, as opposed to only 
those choices available within a given information 


subsystem. 
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2 eoeemearnd User Interface 

Although not listed as a management control reguire- 
ment, the idea of a standard interface between the IRM 
architecture and the user is another physical way to 
strengthen the user's perception of the architecture as a 
unified system, as opposed to a collection of systems. [It 
could easily be implemented in the proposed LAN environment 
by using a standardized interface in the programs designed 
to satisfy the control reguirements. 

A hidden advantage to this approach is that it 
minimizes expense; once the interface is designed, the same 
specifications are used for each subseguent program. Only 
the information presented on the screen changes; the 
H6Gation of status information and instructions, the type of 
selection (e.g. by letter, from a menu), and all the other 
presentation characteristics are identical. It also shortens 
the user learning time. A user recognizes the format and 
can instantly transfer experience with the interface he or 


she gained uSing other programs. 


D. A VIRTUAL LAN 

A variety of networks are available to connect computers 
and communications devices, each with a variety of 
CWaracteristics, and each calling itself a Local Area 
Network. Active or passive, broadband or baseband, central 


SmmoseewemoaCONErPOI, ©~the list of options is almost 


62 





Sree ssyeiterEwork technology is not Eully developed yet, as 
the Cc? Support Plan recognized in deciding not to include it 
in the near-term budgets. The Local Area Network we have 
examined to support the integration and management control 
goals of the Coast Guard IRM Architecture is not a specific 
product. The phrase is intended to describe an ability to 
electronically cross-connect the users, computers and 
communications resources of a Coast Guard District Office in 
a productive way. This virtual LAN should provide reasonably 
guaranteed delivery of information between any pair of 
nodes, notification of non-delivery, and an auditable record 
of access and use of its services. 

This limited functionality is an adequate base from 
which to develop prototype systems or programs to satisfy 
the specified management control requirements, and is 
available at less technological risk than that a 'real' LAN 
represents. Shared logic word processors, such as WANG OIS- 
140's provide electronic mail and hardware terminal 
identifiers; they have been connected to the record 
telecommunications system in the First and the Fifth Coast 
Guard Districts. The Eighth and the Seventeenth Coast Guard 
Districts are currently running Office Automation/Word 
Processing evaluations on Vax 11/780 computer based systems; 
these also support electronic mail, and have resource usage 
TWe@etor Programs available. The District minicomputers 


scheduled for FY 86 purchase and installation could provide 
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Bieeey Geel LAN Eunection through their installed terminals 
and the appropriate programming. Any of these systems with 
a sufficiently large base of connected users could provide 
an adequate functional base on which to prototype a system 
ee program iaareerded to meet one or more of the management 


control requirements of the IRM architecture. 


E. SUMMARY 

We have presented the reasons that the nee Guard 
District Office is the crucial level’ within the IRM 
architecture at which to address the solution to management 
control requirements of that architecture. The power of a 
Local Area Network to physically reinforce the logical 
integration crucial to the IRM architecture and to the 
success of its management controls, was presented and 
examined for each of the management control requirements 
Beepesea in Chapter 1V. Finally, a distinction was drawn 
between any specific technology or product and the virtual 
LAN functionality required to begin satisfying the 


requirements. 
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Vat CONCIUSITON 


GTiiaeusemests has attempted to present a positive 
description of the integrative power of management control, 
in the setting of a large information system. We have 
suggested that, properly developed, the management control 
structure can unify diverse information systems into a 
single architecture, and yet preserve a powerful, if subtle, 
ability to influence user choices. If developed early, the 
control structure can ease the necessary transitions of 
maturing information systems. 

The management control requirements proposed assume that 
the intention of the Office of C? as program managers for 
the IRM architecture is to integrate the separate vertical 
information subsystems into a cohesive whole. The proposed 
LAN implementation of a system to satisfy the control 
requirements centers on accomplishing that purpose. Both the 
requirements and the LAN implementation should be evaluated 
With this underlying assumption of integrating the 
architecture in mind. Both would have to be modified to 
Support a different concept of the architecture. 

This early delineation of a management control schema 
for the IRM architecture may have some practical 
Significance for the U. S. Coast Guard. With major hardware 


and software procurements for the IRM architecture still 
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Soweeeno NEMO CDPOLeUnity exists now to buy the features or 
capabilities that will be necessary to management control 
later on. More valuable than procurement opportunities may 
be the necessary lead time created for careful prototype 
development of the programs and systems that the management 
control structure will require. 

Although the Coast Guard IRM architecture was used as a 
focus for development of the suggested management control 
structure, the requirements and implementation presented 
could also be applied to other information systems. The 
organization served by the information system would need to 
Meewescutetoiently centralized control of information 
services that one single, or several regional offices, could 
set transfer prices. The company culture would have to 
Support the notion of user autonomy within limits, and 
decentralized decision responsibility. The transfer pricing 
basis of the control strategy assumes as well that 
information services costs are not allocated totally as 
overhead, but charged to users to a significant degree. 

Changing the information flows of an entire agency must 
change the structure, if not the nature, of the whole 
organization. Controlling the system which implements these 
changing information flows iS a necessary step to insuring 
that the development process will one Be directed growth and 
not uncontrolled change. This examination of management 


control within information systems 1s meant to assist the 
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PeeeeeGmaras and other organizations in retaining 


erganizational control of these technology-driven changes. 
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